Search vulnerabilities

Expected end of text, found '@' (at char 12), (line:1, col:13)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,932

Export CSV
CVE-2026-113767

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 20 more
CVE-2026-95948

Windows Graphics Kernel Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Windows 10 1607 Windows 10 1809 and 21 more
CVE-2026-129428

Pulse 5.0.17 before 6.8.0 Missing Authorization via AI Assistant Approval API

Pulse from 5.0.17 before 6.8.0 contains a missing authorization vulnerability in the /api/ai/approvals endpoints that allows authenticated viewer-level users to manage approval requests. Attackers can list pending requests to expose proposed commands and targets, and approve or deny other users' requests, altering decision and audit state.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Rcourtman
Products
Pulse